1.0.0-beta3 Bug-fix, hardening and performance release: - Hardened post-purchase token validation: tokens are now bound to the order's verified email as well as the order id and expiry. API change — PostPurchaseTokenService::createToken() and ::verifyToken() each take a required $email argument. - Performance: anonymous page requests no longer load the anonymous user account to check for a subscription. - Performance: one subscription lookup per request instead of two (memoized, cleared on any subscription write). - Performance: new refresh-throttle service caps how often a subscription's remote billing state is refreshed on the render path. - Role sync for a subscription whose remote plan has no local plan entity now logs at WARNING instead of ERROR. - subscription_manager:list-connectors no longer errors when no connectors are installed. - Consolidated the duplicate "My Membership" account-menu links into one and sorted it to the top of the account menu. - New update 10013 backfills entitlement roles for active subscribers missing a role granted by their active plan (additive and idempotent).